SaaS

SaaS Release Notes - May 1, 2026

Production release notes - May 1, 2026

Release notes cover new features, enhancements, and fixes that have been released to production.

Identity Security Cloud is SailPoint's next-generation identity security solution. It encompasses and builds on features and functions from IdentityNow. The release notes cover both Identity Security Cloud and IdentityNow features.

New features

Product	What's new
Connectivity - Snowflake	Your VA-based Snowflake source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact and maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source.
Identity Security Cloud - Harbor Pilot	You can now use Harbor Pilot to request access for someone else using natural language queries. Harbor Pilot helps identify the right requestee, suggests available requestable objects, and confirms request details before submission to streamline onboarding and role-change processes. Refer to Creating and Managing Access Requests for more information.

Enhancements

Product	Feature enhancements
Connectivity - EPIC	Introduced a new configuration option (`viewUserConcurrency`) that allows customers to control the number of concurrent ViewUser API calls made by Epic connector(s) during entitlement aggregation. This enhancement helps reduce aggregation time and mitigates timeout issues reported by customers.
Connectivity - Box	The SailPoint Box connector is now enhanced to support Client Credentials Authentication.
Identity Security Cloud - Identity Graph	When a filter is removed, it is now removed from both the Filters panel and the identity graph.
SailPoint Cloud Infrastructure Entitlement Management (CIEM)	SailPoint CIEM can now collect Amazon Bedrock and Amazon Bedrock AgentCore data and display the effective access and access paths for human identities to those agents, including who has read, write, and admin privileges to those resources. You might need to update existing policies with the Bedrock permissions. Refer to Collecting Amazon Bedrock Data for more information.

Fixes

Product	Issue ID	Fixes
SaaS Connectors - Web Services SaaS	CONSEALINK-8948	The SailPoint Webservices SaaS connector now improves handling of HTTP 429 and 503 errors when calling managed APIs by using a configurable delay from the source, followed by `Retry-After` header when applicable, with a 30-second fallback.
SaaS Connectors - Microsoft Entra SaaS	CONHOWRAH-6816	The socket timeout for the Microsoft Entra ID SaaS connector is now configurable, with a default value of 180 seconds. This prevents failures caused by HTTP request timeout errors.
Connectivity - JDBC	CONETN-5383	The SailPoint JDBC connector now supports configurable single account aggregation after provisioning.
Connectivity - Microsoft Entra ID	CONHOWRAH-6857	To prevent timeout errors during account creation when Privileged Identity Management (PIM) is enabled, the Microsoft Entra ID connector now includes a `skipPIMMembershipOnCreateAccount` parameter. For more information, refer to Troubleshooting.
SaaS Connectors - GitHub SaaS	CONSEALINK-9501	Resolved an issue in GitHub SaaS account aggregation where the process could fail with a `TypeError` when attempting to read properties (`node, collaborators`) from a `null` value.
Identity Security Cloud -Provisioning and Task Manager	ISCRP-6014	Fixed an issue where, when a cloud lifecycle state change failed, the value for the lifecycle state displayed as null in audit events before changing to the correct value. Null values are no longer recorded in these cases.